Académique Documents
Professionnel Documents
Culture Documents
BARCELONA
C/ Francesc Teixid, 22
E-08918 Badalona
(Spain)
PORTUGAL
portugal@ermec.com
PORTUGAL
portugal@ermec.com
Chapter 11
Special purpose relays
Part 1: Safety relays
Particular properties
and benefits
Introduction
Relays with forcibly guided contacts are a special type of relays. Colloquially they are
often referred to as safety relays. Apart from the usually specified high product
quality, they satisfy particular standard requirements.
These relays are primarily used in controllers to cope with safety-related tasks.
Among these are the protection of health, life, the environment, comp/ex processes
and capital equipment.
NOTE- Terms and standards in italics are described in 11.1.9 and 11.1.10, respectively.
11.1.2
What is meant by forcible guidance of contacts?
A forcibly guided contact consists of at least one NC-contact and at least one NOcontact with a mechanical device which prevents the NC- and NO-contacts from
being closed at the same time. This requirement applies particu/arly for faulty
conditions (fau/ty canditian) ayer the entire life span, e.g. when a cantact fails ta
apeno
The cansequence of this in a circuit is that an NC-contact that does not open can be
detected by an open NO-contact. Correspondingly the same applies to an NOcontact whose NC-contact remains open (identificatian of a fai/ure).
It follows from this requirement that the opening of a contact a/ways precedes the
closing of the antiva/ent contact, and that this under no circumstance occurs
simultaneously the other way round .
6th
Ed
11-1
-20
O 11
10
1
11
c 11
10 -...
11
10011
110 1
ambienHemperature'l!
Turc]'U
Figure 11.1.1-Coil energization diagram
(exemplary presentation)
PORTUGAL
portugal@ermec.com
This means that the 'failure fo open' is detectable. This applies equally to both NCand NO-contacts. For this failure to occur, the antivalent contact in question must
have a mnimum opening of > 0.5 mm or at least (2 x 0.3) mm in the case of bridge
contacts. Apart from this, the possible causes of a faulty condition of the relay such
as wear and breakage of components (especially springs )must be assessed and
their etfects kept under control by suitable design measures.
When a circuit is designed, the supply voltage must be considered in relation to the
operation. The minimum value U1 is required for the relay to respondo To avoid
thermal overload, the value U2 must not be exceeded.
For relays with forcibly guided contacts, there s a further voltage limit U3. If an
overenergization occurs in the faulty condition 'failure to open' of an NC-contact, a
contact gap of at least 0.5 mm at the forcibly guided NO contacts must be
maintained.
EN 50205 differentiates between contact assemblies according to the type of forcible
guidance. Type A describes relays in which all contacts of the contact assembly are
connected to each other by the forcible mechanical guidance. On the other hand, not
all contacts of the contact assembly for type B relays are connected to each other by
forcible guidance.
Relays with CO-contacts in safety
circuits
must
also
satisfy
the
requirements of standard EN 50205.
This means that only one NC- or
NO-contact may be used per CO-contact
and that the CO contacts must be
mutually forcibly guided. This is why
11-2
Type A
Type B
PORTUGAL
portugal@ermec.com
only relays with at least two CO-contacts may be used for this type of application.
They are also assigned to the forcibly guided category B.
Hereby forcible guidance of the contacts must not be confused with direct apening
actian as per lEC EN 60947-5-1, Appendix K.
Failure to open and failure of insulation
are the only failures of significance in the
context
of
our
safety-relevant
cansiderations .
Figure 11.1.3-Relay
g~~~'
in free position
Figure 11.1.3 shows the neutral condition of the coil (monostable). The relay is in
the free position, the 2 NO-contacts are open and the NC-contact is closed.
Figure 11.1.4 shows the relay
energized coil after the end of the
on process in a stable condition.
NO-contacts are now closed and
contact is open.
with an
switchThe two
the NC-
O.5mm~1
~.gap
~~~l
Figure 11.1.5-Relay in faulty
condition, coil not energized
Figures 11.1.6 to 11.1.8 show relay executions with forcibly guided contacts.
6th
Ed
11-3
PORTUGAL
portugal@ermec.com
11.1.3
Standards
Elementary relays, with forcibly guided contacts, that are used as components in
safety applications must comply with the standard of safety relays EN 50205 as well
as the general standards for elementary relays lEC EN 61810-1, lEC EN 61810-2
and lEC EN 61810-7.
11.1.4
Failure types
11.1.4.1
Safety-relevant failures
11-4
11.1.5
. .
11.1.6
PORTUGAL
portugal@ermec.com
Machine tools
Process engineering
Medical devices
Fuel technology
Mlnlng
and
technology
..
matenals
handling
..
It must be pointed out that relays of the type described here do not in themselves
represent safety. The task of accomplishing safety is only fulfilled by the appropriate
utilization of the special properties of the forcibly guided contact and a corresponding
safety circuit. Hereby additional requirements must be met which do not directly
relate to the relay.
Such additional requirements include, for example, unintentional breaking and
bridging of power circuits within the control, or externally connected switching
elements. This means that all elements involved in the operation must be considered
and assessed in respect of their behavior in case of failure.
Direct wiring of contacts to protect them from cutoff arcs, for example, must be
avoided. In case of failure, the arrangement protecting the contact can inadmissibly
bridge the contact. The wiring must be assigned to the load to be switched in this
case. Requirements from the standards for appliances and systems of the different
application areas must be met additionally, e.g., lEC 62103 and lEC EN 60204-1.
11.1.7
6th
Ed
11-5
PORTUGAL
portugal@ermec.com
2-<:1amekeJeace-drcUrI
{~Wltlojpolertlal}1
fot
ft
3~
~
eS" R
'"!!!
'O
B
11
Figure 1.1.10- The free position of the relay is shown, both release circuits are interrupted.
The connection points marked 1, 2 and 3 indicate the positions at which the external
switching elements must be looped in. For simplicity's sake these points are bridged here.
2-<:1amE:ln:1eaoe -clroJtI
{~~wltlojpoterf.lar~
~
A
,-
R
A
L
11
Figure 1.1.12-When relay A is activated, relays B and C respond via the contacts a-1 and a2. Immediately beforehand, the two NC-contacts a-3 and a-4 in the release circuit are
opened. Contacts b-3 and c-3 close after relays B and C are activated. Simultaneously,
contacts b-1 and c-1 are opened and the current supply to relay A is switched off. For this to
happen with a delay, the release is briefly delayed by the discharge of capacitor C. Closing
11-6
also at the same time are contacts b-2 and c-2, by which the self-holding
relays B and
is closed.
2-<:!1amel-re!eas.e
PORTUGAL
portugal@ermec.com
<:troJ1I
(~~Wln:)I.tPJ!e~'I
<I~
"?f
~I'
a-3'
~A""
~.
&-4t
'~-~l"*-
~;
B
'[
Figure 1.1.13-With the release of relay A to the free position, contacts a-3 and a-4 in the
release circuit are also closed.
6th
Ed
11-7
PORTUGAL
portugal@ermec.com
Figure 1.1.14-Extended
release circuits
11.1.8 Surnrnary
Relays with forcibly guided contacts designed according to EN 50205 are innovative
and reliable components with which safety engineers can develop and produce failsafe controls or appliances. Like relays in general, relays with forcibly guided
contacts can safely separate potentials and rigorously withstand of transient
voltages. The contacts themselves cope reliably with wide ranges of contact loads.
This means that relays with forcibly guided contacts can make an economically
important contribution towards the protection of health, life, the environment, as well
as facilities and equipment, processes and capital assets.
11.1.9 Terrninology
fail-safe: Ability of a safety unit to remain in a safe condition (fail-safe) or to directly
change into another safe condition if a certain failure occurs (deterministic behavior
in case of failure).
failure: A failure is the inadmissible deviation of an actual condition from the
reference condition.
A failure results if a specified function no longer exists, whereby the following
applies: failures with a common cause are to be regarded as 1 failure, Le. follow-up
failures are included.
exclusion of a failure: An exclusion of a failure is possible if the occurrence of a
failure effect can be prevented by suitable measures. Forcible guidance of contacts
in accordance with EN 50205 guarantees that NC-contacts and NO-contacts cannot
be closed at the same time. The failure 'spring breakage', like the failure 'failure to
open', however, cannot be excluded.
Possible exclusions of failures of different
components are listed in the Table 11.1.1.
identification of a failure: By designing circuits carefully, failures will produce
predictable effects. Such a behavior makes the failure detectable, Le. necessary
measures can be clearly deducted.
PORTUGAL
portugal@ermec.com
failure safety (single failure safety): Safe engineering is feasible. Engineering free
of failure is utopia. The acceptance of possible events of failure is a prerequisite. As
far as the effect of a failure is concerned, single failure safety is normally demanded.
This means that after an individual failure has occurred, the agreed safe function is
given. Hereby the simultaneous occurrence of two independent failures not is
assumed. Should a risk of this type exist, then monitoring cycles (cyclic selfsupervision, tests) must take place as frequently as necessary for the above
assumption to be complied with. In its effect, the occurrence of a failure must not
impair the safety, Le. a device's or a system's deterministic behavior. The system
must provide functional safety in a failure-tolerant manner. The cyclic selfsupervision serves to reveal the failure.
effect of a failure: The effect generated by the
occurrence of a failure.
Let us look at the winding of a relay operating
mechanism. In principie the same possibilities for
failures are given as in the case of an ohmic resistor.
A shorted coil changes the value of the resistor, it
decreases at will, a short circuit can even occur.
Resistance rises to infinity if the conductor is
interrupted.
relay
coil
resistor,
These failures affect the function of the relay.
Responding is rendered more difficult or made vaable
impossible in case of a shorted coil; the contact
assembly does not reach the working position. If the
relay is in working position when the failure occurs,
this position is maintained or the contact mechanism changes to the free position.
The appropriate circuit technique makes these failures detectable. The release
circuits are either interrupted or not closed in the first place. The failures assumed
here can also occur when the components are wired together. An interruption can be
caused by a dry joint, just like a short circuit by a failure in a capacitor. Certain
failures can be excluded. In this case one refers to the exclusion of a failure in
11.1.11.
failure modes and effects analysis (FMEA): The study of consequences of failure
events for the purpose of assessing risks.
NOTE-In safety engineering, faHures that may impair safety and cannot be detected are not
allowed to impair the safety. This applies also to the accumulation of such faHures.
AII the assumed failures mentioned lead to a condition which does not impair the
safety-technical function. Hereby, however, relays must not be seen as isolated
components. Instead, the wiring technique and the way in which it is implemented
must be included, so that failures are detected with each switching cycle (See test.)
at the latest.
6th
Ed
11-9
PORTUGAL
portugal@ermec.com
faulty condition: Condition of one item with failures at the time of inspection. The
condition is subject to a failure of a system or device without impairing the safety.
release circuit: Output contact circuit of a device with safety-related function, whose
closing takes place only after it has been tested and confirmed that the function of
the device is as intended.
failure of insulation: Failure of insulation can be excluded, provided that the rules
of insulation coordination are used as the basis for dimensioning. The standards for
the corresponding devices and systems that describe the requirements applicable to
the deployment in question must be observed, e.g., lEC 62103/EN 50178 and
lEC 60204-1. For the relays per se, lEC EN 61801-1 applies in this context.
failure to open: Contrary to expectation, a closed contact doesn't open. This is
possible with both NC- and NO contacts.
redundancy: In engineering, it is the extra effort that is not directly required for the
function of a system, the parallel connection of two systems so that the function is
maintained even if one system fails. In standardization, it is the application of more
than one device or system or part of a device or system to ensure that another one is
available to perform this function in case of a malfunction (lEC/EN 60204-1). In
automation a two-fold redundancy (two-channel feature) is very common. If the two
systems yield different results, an undesirable condition is the result.
homogenous redundancy: Redundancy that employs identical means. In everyday
life, wearing two belts or two suspenders simultaneously would be a homogenousredundant system. Your pants would stay up even if one of the two holding devices
failed.
diverse redundancy: Redundancy in which the means are non-uniformo In everyday
life, the wearing a belt and a suspender simultaneously would be a diverseredundant system to hold up your pants even if one of the two holding devices failed.
Belt and suspender are unequal means. NC- and NO-contacts are diverse contacts.
The series connection of NC- and NO-contacts is a diverse-redundant contact chain.
By means of the order of contact actuation, the contacts are also assigned a certain
strain (simultaneous closing or opening must be avoided). In the above-discussed
connection example this is given for the contacts in the release circuit. The order for
closing the release circuit is as follows:
- NC-contact opens
NO-contact closes
- NC-contact closes.
In this order of actuation, the NC-contact is responsible for the switch-on
"
process. If the power circuit is interrupted, by opening the NO-contact, the
latter becomes responsible for the switch-off process.
test: Process of testing whether or not a certain function exists when the test is
performed. One also refers to cyclic testing, if this process is repeated, prior to each
activation.
t -
11-10
PORTUGAL
portugal@ermec.com
6th
Ed
11-11
PORTUGAL
portugal@ermec.com
ISO 13849-2, among others, also deals in its appendices with safety principies, lists
of failures and exclusions of failures. Table 11.1.1 provides an overview.
Com.e.0nent
Printed circuit
board
Electrical
contact
Electrolyte
capacitor
Interruption of wiring
paths
No
Failure to close
No
Failure to open
No
Interruption
Leakage current
Short circuit
No
Capacity increase
Capacity decrease
Interruption
Short circuit
Wire resistor
Resistance
Semiconductor
diode
11-12
wiring paths
Yes, particular
assumptions
increase
No
No
Yes
No
No
Poss. within limits
Yes
Resistance decrease
Interru ption
Leakage current
Short circuit
No
No
No
Remark